Abstract

Cybersecurity threats and Information Security Policy Compliance is an important IS research stream. This paper extends the Unified Model of Information Security Policy Compliance – UMISPC - by drawing on Schwartz’s universal theory of personal value types. In particular, we consider the values construct as a more precise representation of the person’s motivations to information security policy compliance than the factor 1 “role values” posited in the model. We also hypothesize the values – intention to comply relation being moderated by social factors as per recent theoretical developments.

Share

COinS
 

Information Security Compliance: A Complete Values View

Cybersecurity threats and Information Security Policy Compliance is an important IS research stream. This paper extends the Unified Model of Information Security Policy Compliance – UMISPC - by drawing on Schwartz’s universal theory of personal value types. In particular, we consider the values construct as a more precise representation of the person’s motivations to information security policy compliance than the factor 1 “role values” posited in the model. We also hypothesize the values – intention to comply relation being moderated by social factors as per recent theoretical developments.